CNdisInstaller::Iinstall() hr=80070006 (mfenlfk driver installation failure when installing products)
Last Modified: 2023-10-11 12:47:20 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
CNdisInstaller::Iinstall() hr=80070006 (mfenlfk driver installation failure when installing products)
Technical Articles ID:
KB92750
Last Modified: 2023-10-11 12:47:20 Etc/GMT Environment
Endpoint Protection Platform Endpoint Security (ENS) Threat Prevention 10.x Host Intrusion Prevention (Host IPS) 8.0 MOVE for Multi-platform 4.x Problem
In rare circumstances, installation of our products might fail because of a failure to install Here's an example flow for a failure to install The MSI product installation log file records the following: ... CustomAction ca_inst_MPT returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (0C:F4) [<time>]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (0C:F4) [<time>]: User policy value 'DisableRollback' is 0 MSI (s) (0C:F4) [<time>]: Machine policy value 'DisableRollback' is 0 Action ended <time>: InstallFinalize. Return value 3. ... MSI (s) (78:D8) [<time>]: Windows Installer instaló el producto. Nombre del producto: MOVE AV 4.8.1 Multi-Platform Client. Versión del producto: 4.8.1. Idioma del producto: 1033. Fabricante: McAfee, LLC.. Resultado de la instalación: 1603. ... MSI (c) (98:DC) [<time>]: MainEngineThread is returning 1603 === Verbose logging stopped: <time and date> === The ... [<time>] - Opening inf file <Path to inf file>\mfenlfk.inf [<time>] - Manufacturer is MCAFEE [<time>] - DDInstallSection is Install [<time>] - PnP ID is mfe_ndisfilt [<time>] - Copying inf file... ... [<time>] - CNdisInstaller::Iinstall() hr=80070006 [<time>] - WARNING: Could not open BehaviorBlocking key [<time>] - Lock Service DACL mfenlfk [<time>] - InstallCustomDriver failed [<time>] - mfenlfk.sys is not installed properly [<time>] - parseDriver: exit=0 [<time>] - ERROR: parseFeature: Failed to parse element [Driver] [<time>] - parseFeature: exit=0 [<time>] - ERROR: parseCoreInstall: Failed to parse element [Feature]! [<time>] - parseCoreInstall: return=0 [<time>] - ParseXMLFile: ERROR: parseCoreInstall returned failure [<time>] - ParseXMLFile: return=0 [<time>] - Install error: un-winding install The Cause
It's highly likely that the cause of the issue is related to the Windows operating system configuration.
Solution
There might be Microsoft log files that capture the reason for the failure. You can find these logs at Affected ProductsLanguages:This article is available in the following languages: |
|